Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa
File: 323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa (raw, json)
Hash identifier: Ms9kHjO55sp/+8r8/nx6WD7RziUvXA2+0nJnsbD4qiU=
Subject key identifier: D0:28:94:00:B1:14:EF:88:44:DC:BE:B2:A1:2A:48:53:2B:EE:13:34
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 2BD3D833F2E1CC8D8EF1F079DBFE4897FC755D3E
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa
Signing time: Mon 28 Feb 2022 01:00:12 +0000
ROA not before: Mon 28 Feb 2022 00:55:12 +0000
ROA not after: Mon 27 Feb 2023 01:00:12 +0000
asID: 212705
IP address blocks: 2602:feda:b70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d3:d8:33:f2:e1:cc:8d:8e:f1:f0:79:db:fe:48:97:fc:75:5d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:12 2022 GMT
Not After : Feb 27 01:00:12 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:02:03:ac:59:af:b6:84:e8:e6:30:58:dd:
cc:c4:43:22:ff:37:8a:27:de:1e:4c:c8:ac:a1:62:
b9:64:63:7f:40:7c:c0:0b:a1:75:06:d2:a8:0e:a0:
76:a7:a8:99:aa:34:15:d0:a5:26:50:86:0c:6b:ae:
48:8f:b9:5e:b7:78:29:75:36:5e:18:1c:36:ec:7c:
9b:fa:46:01:59:15:8d:ab:cd:68:80:6a:a3:e5:27:
65:71:a6:02:c9:28:7a:06:0c:78:f0:0c:6f:f5:b6:
3c:15:e6:a8:3f:8d:8b:31:d5:4d:25:10:24:12:b0:
c8:a3:db:ec:25:26:16:a2:14:9f:04:be:a2:f3:d2:
66:94:5b:a1:1a:3b:c7:11:77:52:13:d0:3c:7c:45:
57:b1:1b:53:ff:17:52:89:e2:92:09:2f:c9:3e:f6:
4b:9a:48:63:6d:a1:7f:cb:d7:c4:cb:a3:ff:d8:07:
83:d7:3c:a2:14:7b:e0:45:c4:18:90:3b:76:86:c4:
62:cf:5a:aa:8b:b1:29:ad:eb:5b:cd:92:e8:55:a6:
39:d0:6a:bc:00:84:95:cb:ec:e6:9a:e6:38:dc:78:
fc:85:5c:8d:75:58:cb:4e:68:82:dc:b9:ea:30:18:
c5:93:72:03:87:6e:bb:6a:ff:8b:fd:2a:66:3c:97:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:28:94:00:B1:14:EF:88:44:DC:BE:B2:A1:2A:48:53:2B:EE:13:34
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:b70::/44
Signature Algorithm: sha256WithRSAEncryption
09:21:c1:ab:61:b9:0d:51:d0:e4:2d:06:a5:5f:89:e7:2f:90:
12:89:3a:70:da:7b:97:80:cd:92:3a:55:6f:2c:78:8d:8c:ea:
2d:bd:78:a8:27:5e:34:d5:7b:f5:7f:a5:c3:86:71:e0:24:bb:
f9:12:0c:9b:5d:90:cb:62:50:f8:57:02:8f:ee:f8:ce:ec:22:
c4:04:97:02:ae:2f:79:cb:05:44:a7:e2:f2:6b:c9:5f:e0:ea:
ef:10:72:e5:f8:f1:18:fc:53:8a:b4:8d:1a:e5:1d:25:75:45:
e7:c0:b4:79:a7:8b:74:7a:fc:d3:1c:b6:93:1c:f9:54:d9:69:
76:c5:50:e7:21:87:bf:db:21:62:16:3f:39:26:60:69:08:c1:
0f:91:68:37:32:eb:f1:25:15:bd:67:f4:3e:df:c8:ce:a0:b9:
2a:59:47:f9:3a:73:b2:5f:83:b7:84:d6:e0:c6:51:dd:dc:86:
8e:dc:a6:46:89:07:70:09:08:6f:2e:a7:40:c2:1b:ae:e4:03:
ef:2d:b5:72:c2:90:1a:ec:f0:5a:4a:cf:c9:15:91:2a:6d:df:
d3:28:a2:f7:48:6f:0f:dc:f8:98:de:39:e0:6b:c1:92:45:76:
d6:80:7c:0a:bb:d9:ee:bf:2f:d6:18:fe:5d:f6:fa:54:45:4e:
34:0e:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org